3a5209e96c
- docker-compose with Postgres 16 + slim Python API image - FastAPI app with session middleware, health endpoint, static login page - Google OAuth (Authlib) with email invite-list whitelist; admin role support - User + OAuthToken models; refresh tokens encrypted at rest (Fernet) - Alembic migrations, run automatically on container startup - Postgres backup/restore scripts for portability between machines
64 lines
2.1 KiB
Python
64 lines
2.1 KiB
Python
"""initial: users and oauth_tokens
|
|
|
|
Revision ID: 0001_initial
|
|
Revises:
|
|
Create Date: 2026-06-11
|
|
"""
|
|
from typing import Sequence, Union
|
|
|
|
from alembic import op
|
|
import sqlalchemy as sa
|
|
|
|
revision: str = "0001_initial"
|
|
down_revision: Union[str, None] = None
|
|
branch_labels: Union[str, Sequence[str], None] = None
|
|
depends_on: Union[str, Sequence[str], None] = None
|
|
|
|
|
|
def upgrade() -> None:
|
|
op.create_table(
|
|
"users",
|
|
sa.Column("id", sa.Integer(), primary_key=True),
|
|
sa.Column("google_sub", sa.String(length=64), nullable=False),
|
|
sa.Column("email", sa.String(length=320), nullable=False),
|
|
sa.Column("display_name", sa.String(length=255), nullable=True),
|
|
sa.Column("avatar_url", sa.String(length=1024), nullable=True),
|
|
sa.Column("role", sa.String(length=16), nullable=False, server_default="user"),
|
|
sa.Column(
|
|
"created_at",
|
|
sa.DateTime(timezone=True),
|
|
server_default=sa.func.now(),
|
|
nullable=False,
|
|
),
|
|
)
|
|
op.create_index("ix_users_google_sub", "users", ["google_sub"], unique=True)
|
|
op.create_index("ix_users_email", "users", ["email"], unique=True)
|
|
|
|
op.create_table(
|
|
"oauth_tokens",
|
|
sa.Column("id", sa.Integer(), primary_key=True),
|
|
sa.Column(
|
|
"user_id",
|
|
sa.Integer(),
|
|
sa.ForeignKey("users.id", ondelete="CASCADE"),
|
|
nullable=False,
|
|
unique=True,
|
|
),
|
|
sa.Column("refresh_token_enc", sa.String(), nullable=True),
|
|
sa.Column("access_token", sa.String(), nullable=True),
|
|
sa.Column("expiry", sa.DateTime(timezone=True), nullable=True),
|
|
sa.Column("scopes", sa.String(), nullable=True),
|
|
sa.Column(
|
|
"updated_at",
|
|
sa.DateTime(timezone=True),
|
|
server_default=sa.func.now(),
|
|
nullable=False,
|
|
),
|
|
)
|
|
|
|
|
|
def downgrade() -> None:
|
|
op.drop_table("oauth_tokens")
|
|
op.drop_index("ix_users_email", table_name="users")
|
|
op.drop_index("ix_users_google_sub", table_name="users")
|
|
op.drop_table("users")
|